Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251151 10 危険 IBM - IBM Lotus Domino の POP3 および IMAP サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0919 2011-04-26 11:45 2011-02-8 Show GitHub Exploit DB Packet Storm
251152 10 危険 IBM - IBM Lotus Domino の NRouter サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0918 2011-04-26 11:44 2011-02-8 Show GitHub Exploit DB Packet Storm
251153 10 危険 IBM - IBM Lotus Domino の nLDAP.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0917 2011-04-26 11:07 2011-02-8 Show GitHub Exploit DB Packet Storm
251154 10 危険 IBM - IBM Lotus Domino の SMTP サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0916 2011-04-26 11:06 2011-02-8 Show GitHub Exploit DB Packet Storm
251155 10 危険 IBM - IBM Lotus Domino の nrouter.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0915 2011-04-26 11:05 2011-02-8 Show GitHub Exploit DB Packet Storm
251156 10 危険 IBM - IBM Lotus Domino の ndiiop.exe における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2011-0914 2011-04-26 11:04 2011-02-8 Show GitHub Exploit DB Packet Storm
251157 10 危険 IBM - IBM Lotus Domino の ndiiop.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0913 2011-04-26 11:03 2011-02-8 Show GitHub Exploit DB Packet Storm
251158 9.3 危険 IBM - IBM Lotus Notes における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0912 2011-04-26 11:02 2010-07-26 Show GitHub Exploit DB Packet Storm
251159 6.8 警告 アップル - Apple Mac OS X の ImageIO における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-0194 2011-04-26 10:58 2011-03-23 Show GitHub Exploit DB Packet Storm
251160 6.8 警告 アップル - Apple Mac OS X の Image RAW におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0193 2011-04-26 10:57 2011-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
881 9.8 CRITICAL
Network
- - ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without para… New CWE-89
SQL Injection
CVE-2026-41462 2026-04-28 03:36 2026-04-28 Show GitHub Exploit DB Packet Storm
882 8.8 HIGH
Network
- - ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload permissions to write files outs… New CWE-22
Path Traversal
CVE-2026-41463 2026-04-28 03:36 2026-04-28 Show GitHub Exploit DB Packet Storm
883 6.5 MEDIUM
Network
- - ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level privileges to retrieve sensitive … New CWE-862
 Missing Authorization
CVE-2026-41464 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
884 6.5 MEDIUM
Network
- - ProjeQtor versions 7.0 through 12.4.3 contains a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequ… New CWE-22
Path Traversal
CVE-2026-41465 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
885 5.4 MEDIUM
Network
- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to properly sanitize user input by only d… New CWE-79
Cross-site Scripting
CVE-2026-41466 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
886 5.4 MEDIUM
Network
- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName() function fails to restrict HTML and HTM file … New CWE-79
Cross-site Scripting
CVE-2026-41467 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
887 - - - authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either bec… New CWE-842
 Placement of User into Incorrect Group
CVE-2026-6970 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
888 9.8 CRITICAL
Network
- - A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a man… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7136 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
889 9.8 CRITICAL
Network
- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipula… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7137 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
890 9.8 CRITICAL
Network
- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7138 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm